{"id":3031761,"url":"https://alion.io/job/mysten-labs-senior-security-engineer","title":"Senior Security Engineer","company":{"id":47448,"name":"Mysten Labs","domain":"mystenlabs.com","url":"https://alion.io/company/mysten-labs","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":165000,"max":225000,"currency":"USD","period":"year","gross":null,"usd_annual":225000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Move","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"SIEM","optional":false},{"name":"SQL","optional":false},{"name":"Sui","optional":false},{"name":"Zero Trust","optional":false},{"name":"AI Agents","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"Claude Code","optional":true},{"name":"ISO 27001","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-21T18:05:20Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-26T17:07:07Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Mysten Labs’ mission is to advance the internet through step-function improvements in what technology makes possible. We build foundational infrastructure and products that give people, businesses, and developers new ways to interact, transact, and create value.\nOur work spans on-chain finance and the emerging agent economy. Through Sui, Move, and our broader technology stack, we’re building the systems that make these experiences possible - from secure, scalable blockchain infrastructure to new ways for businesses and AI agents to interact.\nResponsibilities\nBuild and operate the Security Observability & Data Platform (tens of TB/month and growing). This covers ingestion, normalization and retention, plus the query and detection layer on top. Detections are code: tested, reviewed, and measured for precision.\n\nOwn endpoint security across the fleet: deploy, tune and respond with EDR; run and configure binary authorization; and set hardening baselines with IT Operations.\n\nLead threat hunting, internal investigations and insider-threat work. Handle security incidents end to end: triage, containment, forensics, root cause, and the control that prevents a repeat.\n\nBuild the next generation of security services and run them in production: zero-trust AuthN/AuthZ, a uniform blocking service, an application proxy, asset inventory, developer portal, and compliance as code.\n\nBuild and run the agent platform (local and Kubernetes). Use LLM agents to automate triage, enrichment, investigation and response, with deterministic checks wherever a model's answer isn't enough.\n\nReview infrastructure and cloud designs (Kubernetes, AWS/GCP, bare metal, CI runners) for security, and help engineering teams adopt the shared services instead of building their own.\n\nRun red-team and adversary-emulation exercises, and turn the results into detections and fixes.\n\nWrite runbooks and post-mortems that someone who wasn't in the room can follow at 3 a.m.\n\nMinimum Qualifications\nBachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience.\n\n5+ years in security engineering, detection and response, or infrastructure/SRE with a security focus, including hands-on incident response on endpoints and in the cloud.\n\nExperience operating an EDR, writing and tuning detections. Knowledge of macOS and Linux internals as attackers use them: persistence, credential theft, process injection, living-off-the-land binaries.\n\nExperience building or operating telemetry pipelines and a SIEM or security data lake at TB scale. Strong SQL, including detection logic over large datasets.\n\nHands-on production engineering: Linux, containers, Kubernetes, at least one major public cloud, infrastructure as code, monitoring and alerting.\n\nProficiency in Python or Go, and comfort with Rust or willingness to work in it (most of Mysten's stack are Rust).\n\nWorking knowledge of identity: SSO (OIDC/SAML), phishing-resistant MFA, device trust, and how session and token theft work.\n\nStrong written communication: can run an incident channel and write the post-mortem.\n\nInterest in the web3 space is required.\n\nPreferred Qualifications\nExperience building zero-trust access, identity-aware proxies or policy engines.\n\nBinary authorization or allowlisting at fleet scale\n\nFamiliarity with the threat actors that target crypto companies and their methods, from social engineering and fake campaigns to supply chain compromises.\n\nDigital forensics (memory, disk, macOS unified logs) and malware analysis.\n\nExperience building security tooling with LLM agents (Claude Code skills or comparable), and a clear sense of where models help and where deterministic tooling has to do the work.\n\nCompliance as code (CIS benchmarks); experience in ISO 27001 or SOC 2 environments.\n\nPublications, conference talks or open-source security tooling.\n\nEmployment is contingent upon the successful completion of a background check, which may include verification of employment history, education credentials, criminal history, and other relevant information.\nRegarding the recent rash of technology job scams: Be aware that emails from genuine Mysten Labs group recruiters will always come from the @ mystenlabs.com domain or related subdomains (e.g., mystenlabs.com/careers). Remember: you can always verify positions on our job boards at www.mystenlabs.com/careers.\nTo support an efficient and fair hiring process, we may use technology-assisted tools, including artificial intelligence (AI), to help identify and evaluate candidates. All hiring decisions are ultimately made by human reviewers.\nOur team is remote first and we are hiring across the world. Here at Mysten Labs, you’ll be joining a world-class team with tremendous growth potential as we bring the next billion users to web3. We raised a $300M Series B round from top Silicon Valley led venture funds like Jump Crypto, Andreessen Horowitz (a16z), Binance Labs, Redpoint, Lightspeed, Coinbase Ventures, Electric Capital, Standard Crypto, NFX, Slow Ventures, Scribble Ventures, Samsung Next, Lux Capital, among other investment firms and strategic partners. Come join us and build the future of web3!","description_format":"text","description_chars":5192,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Blockchain Infrastructure"],"lifecycle":[{"event":"open","at":"2026-10-21T20:28:04Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 3 · green card filings: 1","filings_12m":3,"filings_prev_12m":5,"green_card_filings_12m":1,"median_offered_wage_usd":226250,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":35,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":225000,"is_top_pay":true},"html_url":"https://alion.io/job/mysten-labs-senior-security-engineer","json_url":"https://alion.io/job/mysten-labs-senior-security-engineer.json","meta":{"generated_at":"2026-10-26T22:11:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29971,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":47448},"rest":"https://alion.io/mcp/rest/get_company?id=47448"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmysten-labs-senior-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmysten-labs-senior-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmysten-labs-senior-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mysten-labs-senior-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmysten-labs-senior-security-engineer"}]}